Security update for java-1_7_0-openjdk SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:0005-1 Final 1 1 2018-01-03T16:37:47Z current 2018-01-03T16:37:47Z 2018-01-03T16:37:47Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for java-1_7_0-openjdk This update for java-1_7_0-openjdk fixes the following issues: Security issues fixed: - CVE-2017-10356: Fix issue inside subcomponent Security (bsc#1064084). - CVE-2017-10274: Fix issue inside subcomponent Smart Card IO (bsc#1064071). - CVE-2017-10281: Fix issue inside subcomponent Serialization (bsc#1064072). - CVE-2017-10285: Fix issue inside subcomponent RMI (bsc#1064073). - CVE-2017-10295: Fix issue inside subcomponent Networking (bsc#1064075). - CVE-2017-10388: Fix issue inside subcomponent Libraries (bsc#1064086). - CVE-2017-10346: Fix issue inside subcomponent Hotspot (bsc#1064078). - CVE-2017-10350: Fix issue inside subcomponent JAX-WS (bsc#1064082). - CVE-2017-10347: Fix issue inside subcomponent Serialization (bsc#1064079). - CVE-2017-10349: Fix issue inside subcomponent JAXP (bsc#1064081). - CVE-2017-10345: Fix issue inside subcomponent Serialization (bsc#1064077). - CVE-2017-10348: Fix issue inside subcomponent Libraries (bsc#1064080). - CVE-2017-10357: Fix issue inside subcomponent Serialization (bsc#1064085). - CVE-2017-10355: Fix issue inside subcomponent Networking (bsc#1064083). - CVE-2017-10102: Fix incorrect handling of references in DGC (bsc#1049316). - CVE-2017-10053: Fix reading of unprocessed image data in JPEGImageReader (bsc#1049305). - CVE-2017-10067: Fix JAR verifier incorrect handling of missing digest (bsc#1049306). - CVE-2017-10081: Fix incorrect bracket processing in function signature handling (bsc#1049309). - CVE-2017-10087: Fix insufficient access control checks in ThreadPoolExecutor (bsc#1049311). - CVE-2017-10089: Fix insufficient access control checks in ServiceRegistry (bsc#1049312). - CVE-2017-10090: Fix insufficient access control checks in AsynchronousChannelGroupImpl (bsc#1049313). - CVE-2017-10096: Fix insufficient access control checks in XML transformations (bsc#1049314). - CVE-2017-10101: Fix unrestricted access to com.sun.org.apache.xml.internal.resolver (bsc#1049315). - CVE-2017-10107: Fix insufficient access control checks in ActivationID (bsc#1049318). - CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307). - CVE-2017-10110: Fix insufficient access control checks in ImageWatched (bsc#1049321). - CVE-2017-10108: Fix unbounded memory allocation in BasicAttribute deserialization (bsc#1049319). - CVE-2017-10109: Fix unbounded memory allocation in CodeSource deserialization (bsc#1049320). - CVE-2017-10115: Fix unspecified vulnerability in subcomponent JCE (bsc#1049324). - CVE-2017-10118: Fix ECDSA implementation timing attack (bsc#1049326). - CVE-2017-10116: Fix LDAPCertStore following referrals to non-LDAP URL (bsc#1049325). - CVE-2017-10135: Fix PKCS#8 implementation timing attack (bsc#1049328). - CVE-2017-10176: Fix incorrect handling of certain EC points (bsc#1049329). - CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307). - CVE-2017-10074: Fix integer overflows in range check loop predicates (bsc#1049307). - CVE-2017-10111: Fix checks in LambdaFormEditor (bsc#1049322). - CVE-2017-10243: Fix unspecified vulnerability in subcomponent JAX-WS (bsc#1049332). - CVE-2017-10125: Fix unspecified vulnerability in subcomponent deployment (bsc#1049327). - CVE-2017-10114: Fix unspecified vulnerability in subcomponent JavaFX (bsc#1049323). - CVE-2017-10105: Fix unspecified vulnerability in subcomponent deployment (bsc#1049317). - CVE-2017-10086: Fix unspecified in subcomponent JavaFX (bsc#1049310). - CVE-2017-10198: Fix incorrect enforcement of certificate path restrictions (bsc#1049331). - CVE-2017-10193: Fix incorrect key size constraint check (bsc#1049330). Bug fixes: - Drop Exec Shield workaround to fix crashes on recent kernels, where Exec Shield is gone (bsc#1052318). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-OpenStack-Cloud-6-2018-6,SUSE-SLE-DESKTOP-12-SP2-2018-6,SUSE-SLE-DESKTOP-12-SP3-2018-6,SUSE-SLE-RPI-12-SP2-2018-6,SUSE-SLE-SAP-12-2018-6,SUSE-SLE-SAP-12-SP1-2018-6,SUSE-SLE-SERVER-12-2018-6,SUSE-SLE-SERVER-12-SP1-2018-6,SUSE-SLE-SERVER-12-SP2-2018-6,SUSE-SLE-SERVER-12-SP3-2018-6 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ Link for SUSE-SU-2018:0005-1 https://lists.opensuse.org/opensuse-security-announce/2018-01/msg00000.html E-Mail link for SUSE-SU-2018:0005-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1049305 SUSE Bug 1049305 https://bugzilla.suse.com/1049306 SUSE Bug 1049306 https://bugzilla.suse.com/1049307 SUSE Bug 1049307 https://bugzilla.suse.com/1049309 SUSE Bug 1049309 https://bugzilla.suse.com/1049310 SUSE Bug 1049310 https://bugzilla.suse.com/1049311 SUSE Bug 1049311 https://bugzilla.suse.com/1049312 SUSE Bug 1049312 https://bugzilla.suse.com/1049313 SUSE Bug 1049313 https://bugzilla.suse.com/1049314 SUSE Bug 1049314 https://bugzilla.suse.com/1049315 SUSE Bug 1049315 https://bugzilla.suse.com/1049316 SUSE Bug 1049316 https://bugzilla.suse.com/1049317 SUSE Bug 1049317 https://bugzilla.suse.com/1049318 SUSE Bug 1049318 https://bugzilla.suse.com/1049319 SUSE Bug 1049319 https://bugzilla.suse.com/1049320 SUSE Bug 1049320 https://bugzilla.suse.com/1049321 SUSE Bug 1049321 https://bugzilla.suse.com/1049322 SUSE Bug 1049322 https://bugzilla.suse.com/1049323 SUSE Bug 1049323 https://bugzilla.suse.com/1049324 SUSE Bug 1049324 https://bugzilla.suse.com/1049325 SUSE Bug 1049325 https://bugzilla.suse.com/1049326 SUSE Bug 1049326 https://bugzilla.suse.com/1049327 SUSE Bug 1049327 https://bugzilla.suse.com/1049328 SUSE Bug 1049328 https://bugzilla.suse.com/1049329 SUSE Bug 1049329 https://bugzilla.suse.com/1049330 SUSE Bug 1049330 https://bugzilla.suse.com/1049331 SUSE Bug 1049331 https://bugzilla.suse.com/1049332 SUSE Bug 1049332 https://bugzilla.suse.com/1052318 SUSE Bug 1052318 https://bugzilla.suse.com/1064071 SUSE Bug 1064071 https://bugzilla.suse.com/1064072 SUSE Bug 1064072 https://bugzilla.suse.com/1064073 SUSE Bug 1064073 https://bugzilla.suse.com/1064075 SUSE Bug 1064075 https://bugzilla.suse.com/1064077 SUSE Bug 1064077 https://bugzilla.suse.com/1064078 SUSE Bug 1064078 https://bugzilla.suse.com/1064079 SUSE Bug 1064079 https://bugzilla.suse.com/1064080 SUSE Bug 1064080 https://bugzilla.suse.com/1064081 SUSE Bug 1064081 https://bugzilla.suse.com/1064082 SUSE Bug 1064082 https://bugzilla.suse.com/1064083 SUSE Bug 1064083 https://bugzilla.suse.com/1064084 SUSE Bug 1064084 https://bugzilla.suse.com/1064085 SUSE Bug 1064085 https://bugzilla.suse.com/1064086 SUSE Bug 1064086 https://www.suse.com/security/cve/CVE-2016-10165/ SUSE CVE CVE-2016-10165 page https://www.suse.com/security/cve/CVE-2016-9840/ SUSE CVE CVE-2016-9840 page https://www.suse.com/security/cve/CVE-2016-9841/ SUSE CVE CVE-2016-9841 page https://www.suse.com/security/cve/CVE-2016-9842/ SUSE CVE CVE-2016-9842 page https://www.suse.com/security/cve/CVE-2016-9843/ SUSE CVE CVE-2016-9843 page https://www.suse.com/security/cve/CVE-2017-10053/ SUSE CVE CVE-2017-10053 page https://www.suse.com/security/cve/CVE-2017-10067/ SUSE CVE CVE-2017-10067 page https://www.suse.com/security/cve/CVE-2017-10074/ SUSE CVE CVE-2017-10074 page https://www.suse.com/security/cve/CVE-2017-10081/ SUSE CVE CVE-2017-10081 page https://www.suse.com/security/cve/CVE-2017-10086/ SUSE CVE CVE-2017-10086 page https://www.suse.com/security/cve/CVE-2017-10087/ SUSE CVE CVE-2017-10087 page https://www.suse.com/security/cve/CVE-2017-10089/ SUSE CVE CVE-2017-10089 page https://www.suse.com/security/cve/CVE-2017-10090/ SUSE CVE CVE-2017-10090 page https://www.suse.com/security/cve/CVE-2017-10096/ SUSE CVE CVE-2017-10096 page https://www.suse.com/security/cve/CVE-2017-10101/ SUSE CVE CVE-2017-10101 page https://www.suse.com/security/cve/CVE-2017-10102/ SUSE CVE CVE-2017-10102 page https://www.suse.com/security/cve/CVE-2017-10105/ SUSE CVE CVE-2017-10105 page https://www.suse.com/security/cve/CVE-2017-10107/ SUSE CVE CVE-2017-10107 page https://www.suse.com/security/cve/CVE-2017-10108/ SUSE CVE CVE-2017-10108 page https://www.suse.com/security/cve/CVE-2017-10109/ SUSE CVE CVE-2017-10109 page https://www.suse.com/security/cve/CVE-2017-10110/ SUSE CVE CVE-2017-10110 page https://www.suse.com/security/cve/CVE-2017-10111/ SUSE CVE CVE-2017-10111 page https://www.suse.com/security/cve/CVE-2017-10114/ SUSE CVE CVE-2017-10114 page https://www.suse.com/security/cve/CVE-2017-10115/ SUSE CVE CVE-2017-10115 page https://www.suse.com/security/cve/CVE-2017-10116/ SUSE CVE CVE-2017-10116 page https://www.suse.com/security/cve/CVE-2017-10118/ SUSE CVE CVE-2017-10118 page https://www.suse.com/security/cve/CVE-2017-10125/ SUSE CVE CVE-2017-10125 page https://www.suse.com/security/cve/CVE-2017-10135/ SUSE CVE CVE-2017-10135 page https://www.suse.com/security/cve/CVE-2017-10176/ SUSE CVE CVE-2017-10176 page https://www.suse.com/security/cve/CVE-2017-10193/ SUSE CVE CVE-2017-10193 page https://www.suse.com/security/cve/CVE-2017-10198/ SUSE CVE CVE-2017-10198 page https://www.suse.com/security/cve/CVE-2017-10243/ SUSE CVE CVE-2017-10243 page https://www.suse.com/security/cve/CVE-2017-10274/ SUSE CVE CVE-2017-10274 page https://www.suse.com/security/cve/CVE-2017-10281/ SUSE CVE CVE-2017-10281 page https://www.suse.com/security/cve/CVE-2017-10285/ SUSE CVE CVE-2017-10285 page https://www.suse.com/security/cve/CVE-2017-10295/ SUSE CVE CVE-2017-10295 page https://www.suse.com/security/cve/CVE-2017-10345/ SUSE CVE CVE-2017-10345 page https://www.suse.com/security/cve/CVE-2017-10346/ SUSE CVE CVE-2017-10346 page https://www.suse.com/security/cve/CVE-2017-10347/ SUSE CVE CVE-2017-10347 page https://www.suse.com/security/cve/CVE-2017-10348/ SUSE CVE CVE-2017-10348 page https://www.suse.com/security/cve/CVE-2017-10349/ SUSE CVE CVE-2017-10349 page https://www.suse.com/security/cve/CVE-2017-10350/ SUSE CVE CVE-2017-10350 page https://www.suse.com/security/cve/CVE-2017-10355/ SUSE CVE CVE-2017-10355 page https://www.suse.com/security/cve/CVE-2017-10356/ SUSE CVE CVE-2017-10356 page https://www.suse.com/security/cve/CVE-2017-10357/ SUSE CVE CVE-2017-10357 page https://www.suse.com/security/cve/CVE-2017-10388/ SUSE CVE CVE-2017-10388 page SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 6 java-1_7_0-openjdk-1.7.0.161-43.7.6 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Desktop 12 SP2 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Desktop 12 SP2 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Desktop 12 SP3 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Desktop 12 SP3 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP1-LTSS java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP2 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12 SP3 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server 12-LTSS java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 java-1_7_0-openjdk-1.7.0.161-43.7.6 as a component of SUSE OpenStack Cloud 6 java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 as a component of SUSE OpenStack Cloud 6 java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 as a component of SUSE OpenStack Cloud 6 java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 as a component of SUSE OpenStack Cloud 6 The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which triggers an out-of-bounds heap read. CVE-2016-10165 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4 AV:N/AC:H/Au:N/C:N/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2016-10165.html CVE-2016-10165 https://bugzilla.suse.com/1021364 SUSE Bug 1021364 https://bugzilla.suse.com/1064069 SUSE Bug 1064069 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. CVE-2016-9840 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2016-9840.html CVE-2016-9840 https://bugzilla.suse.com/1003579 SUSE Bug 1003579 https://bugzilla.suse.com/1022633 SUSE Bug 1022633 https://bugzilla.suse.com/1023215 SUSE Bug 1023215 https://bugzilla.suse.com/1038505 SUSE Bug 1038505 https://bugzilla.suse.com/1062104 SUSE Bug 1062104 https://bugzilla.suse.com/1120866 SUSE Bug 1120866 https://bugzilla.suse.com/1123150 SUSE Bug 1123150 https://bugzilla.suse.com/1127473 SUSE Bug 1127473 https://bugzilla.suse.com/1184301 SUSE Bug 1184301 inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. CVE-2016-9841 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2016-9841.html CVE-2016-9841 https://bugzilla.suse.com/1003579 SUSE Bug 1003579 https://bugzilla.suse.com/1022633 SUSE Bug 1022633 https://bugzilla.suse.com/1038505 SUSE Bug 1038505 https://bugzilla.suse.com/1064070 SUSE Bug 1064070 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 https://bugzilla.suse.com/1120866 SUSE Bug 1120866 https://bugzilla.suse.com/1123150 SUSE Bug 1123150 https://bugzilla.suse.com/1127473 SUSE Bug 1127473 The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers. CVE-2016-9842 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2016-9842.html CVE-2016-9842 https://bugzilla.suse.com/1003580 SUSE Bug 1003580 https://bugzilla.suse.com/1022633 SUSE Bug 1022633 https://bugzilla.suse.com/1023215 SUSE Bug 1023215 https://bugzilla.suse.com/1038505 SUSE Bug 1038505 https://bugzilla.suse.com/1062104 SUSE Bug 1062104 https://bugzilla.suse.com/1120866 SUSE Bug 1120866 https://bugzilla.suse.com/1123150 SUSE Bug 1123150 https://bugzilla.suse.com/1127473 SUSE Bug 1127473 https://bugzilla.suse.com/1184301 SUSE Bug 1184301 The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation. CVE-2016-9843 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4.6 AV:N/AC:H/Au:S/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2016-9843.html CVE-2016-9843 https://bugzilla.suse.com/1003580 SUSE Bug 1003580 https://bugzilla.suse.com/1013882 SUSE Bug 1013882 https://bugzilla.suse.com/1038505 SUSE Bug 1038505 https://bugzilla.suse.com/1062104 SUSE Bug 1062104 https://bugzilla.suse.com/1116686 SUSE Bug 1116686 https://bugzilla.suse.com/1120866 SUSE Bug 1120866 https://bugzilla.suse.com/1123150 SUSE Bug 1123150 https://bugzilla.suse.com/1127473 SUSE Bug 1127473 https://bugzilla.suse.com/1184301 SUSE Bug 1184301 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10053 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10053.html CVE-2017-10053 https://bugzilla.suse.com/1049305 SUSE Bug 1049305 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). CVE-2017-10067 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10067.html CVE-2017-10067 https://bugzilla.suse.com/1049306 SUSE Bug 1049306 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10074 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10074.html CVE-2017-10074 https://bugzilla.suse.com/1049307 SUSE Bug 1049307 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). CVE-2017-10081 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10081.html CVE-2017-10081 https://bugzilla.suse.com/1049309 SUSE Bug 1049309 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10086 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10086.html CVE-2017-10086 https://bugzilla.suse.com/1049310 SUSE Bug 1049310 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10087 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10087.html CVE-2017-10087 https://bugzilla.suse.com/1049311 SUSE Bug 1049311 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10089 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10089.html CVE-2017-10089 https://bugzilla.suse.com/1049312 SUSE Bug 1049312 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10090 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10090.html CVE-2017-10090 https://bugzilla.suse.com/1049313 SUSE Bug 1049313 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10096 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10096.html CVE-2017-10096 https://bugzilla.suse.com/1049314 SUSE Bug 1049314 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10101 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10101.html CVE-2017-10101 https://bugzilla.suse.com/1049315 SUSE Bug 1049315 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). CVE-2017-10102 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10102.html CVE-2017-10102 https://bugzilla.suse.com/1049316 SUSE Bug 1049316 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). CVE-2017-10105 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10105.html CVE-2017-10105 https://bugzilla.suse.com/1049317 SUSE Bug 1049317 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10107 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10107.html CVE-2017-10107 https://bugzilla.suse.com/1049318 SUSE Bug 1049318 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10108 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10108.html CVE-2017-10108 https://bugzilla.suse.com/1049319 SUSE Bug 1049319 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10109 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10109.html CVE-2017-10109 https://bugzilla.suse.com/1049320 SUSE Bug 1049320 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10110 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10110.html CVE-2017-10110 https://bugzilla.suse.com/1049321 SUSE Bug 1049321 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10111 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10111.html CVE-2017-10111 https://bugzilla.suse.com/1049322 SUSE Bug 1049322 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10114 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10114.html CVE-2017-10114 https://bugzilla.suse.com/1049323 SUSE Bug 1049323 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10115 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10115.html CVE-2017-10115 https://bugzilla.suse.com/1049324 SUSE Bug 1049324 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10116 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10116.html CVE-2017-10116 https://bugzilla.suse.com/1049325 SUSE Bug 1049325 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10118 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10118.html CVE-2017-10118 https://bugzilla.suse.com/1049326 SUSE Bug 1049326 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows physical access to compromise Java SE. While the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: Applies to deployment of Java where the Java Auto Update is enabled. CVSS 3.0 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H). CVE-2017-10125 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 6.2 AV:L/AC:H/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10125.html CVE-2017-10125 https://bugzilla.suse.com/1049327 SUSE Bug 1049327 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10135 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5.4 AV:N/AC:H/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10135.html CVE-2017-10135 https://bugzilla.suse.com/1049328 SUSE Bug 1049328 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10176 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.8 AV:N/AC:L/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10176.html CVE-2017-10176 https://bugzilla.suse.com/1049329 SUSE Bug 1049329 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). CVE-2017-10193 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 low 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10193.html CVE-2017-10193 https://bugzilla.suse.com/1049330 SUSE Bug 1049330 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N). CVE-2017-10198 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5.4 AV:N/AC:H/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10198.html CVE-2017-10198 https://bugzilla.suse.com/1049331 SUSE Bug 1049331 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L). CVE-2017-10243 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 6.4 AV:N/AC:L/Au:N/C:P/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10243.html CVE-2017-10243 https://bugzilla.suse.com/1049332 SUSE Bug 1049332 https://bugzilla.suse.com/1049333 SUSE Bug 1049333 Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data as well as unauthorized access to critical data or complete access to all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N). CVE-2017-10274 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 6.2 AV:A/AC:H/Au:N/C:C/I:C/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10274.html CVE-2017-10274 https://bugzilla.suse.com/1064071 SUSE Bug 1064071 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10281 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10281.html CVE-2017-10281 https://bugzilla.suse.com/1064072 SUSE Bug 1064072 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10285 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 critical 10 AV:N/AC:L/Au:N/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10285.html CVE-2017-10285 https://bugzilla.suse.com/1064073 SUSE Bug 1064073 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N). CVE-2017-10295 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 low 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10295.html CVE-2017-10295 https://bugzilla.suse.com/1064075 SUSE Bug 1064075 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L). CVE-2017-10345 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 low 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10345.html CVE-2017-10345 https://bugzilla.suse.com/1064077 SUSE Bug 1064077 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2017-10346 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 critical 9.7 AV:N/AC:L/Au:N/C:C/I:C/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10346.html CVE-2017-10346 https://bugzilla.suse.com/1064078 SUSE Bug 1064078 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, JRockit. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10347 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10347.html CVE-2017-10347 https://bugzilla.suse.com/1064079 SUSE Bug 1064079 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10348 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10348.html CVE-2017-10348 https://bugzilla.suse.com/1064080 SUSE Bug 1064080 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10349 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10349.html CVE-2017-10349 https://bugzilla.suse.com/1064081 SUSE Bug 1064081 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). Supported versions that are affected are Java SE: 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10350 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10350.html CVE-2017-10350 https://bugzilla.suse.com/1064082 SUSE Bug 1064082 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10355 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10355.html CVE-2017-10355 https://bugzilla.suse.com/1064083 SUSE Bug 1064083 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). CVE-2017-10356 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 4.9 AV:L/AC:L/Au:N/C:C/I:N/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10356.html CVE-2017-10356 https://bugzilla.suse.com/1064084 SUSE Bug 1064084 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). CVE-2017-10357 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10357.html CVE-2017-10357 https://bugzilla.suse.com/1064085 SUSE Bug 1064085 https://bugzilla.suse.com/1070162 SUSE Bug 1070162 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: Applies to the Java SE Kerberos client. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). CVE-2017-10388 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Desktop 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP1-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server 12-LTSS:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP1:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12 SP3:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE Linux Enterprise Server for SAP Applications 12:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-demo-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-devel-1.7.0.161-43.7.6 SUSE OpenStack Cloud 6:java-1_7_0-openjdk-headless-1.7.0.161-43.7.6 important 7.1 AV:N/AC:H/Au:N/C:C/I:C/A:N To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20180005-1/ https://www.suse.com/security/cve/CVE-2017-10388.html CVE-2017-10388 https://bugzilla.suse.com/1064086 SUSE Bug 1064086 https://bugzilla.suse.com/1070162 SUSE Bug 1070162